# =================================================
# ELZEM PLAYER - حماية وتسريع البث
# PHP 8.4 Optimization
# =================================================

# أمن: منع الوصول المباشر للملفات
<FilesMatch "\.(php|inc|log|txt|json|sql|htaccess)$">
    Order Deny,Allow
    Deny from all
</FilesMatch>

# استثناء: السماح فقط لملفات العرض
<FilesMatch "^(fast-stream|player-template|elzem-player)\.php$">
    Order Allow,Deny
    Allow from all
</FilesMatch>

# إعدادات MIME Types
AddType application/x-mpegURL .m3u8
AddType video/MP2T .ts
AddType video/mp4 .mp4
AddType video/webm .webm

# تحسين البث المباشر
<IfModule mod_headers.c>
    # إعدادات M3U8
    <FilesMatch "\.m3u8$">
        Header set Content-Type "application/x-mpegURL"
        Header set Cache-Control "max-age=0, no-cache, must-revalidate"
        Header set Access-Control-Allow-Origin "*"
        Header set Access-Control-Allow-Headers "Range"
        Header set Access-Control-Expose-Headers "Content-Length, Content-Range"
        Header set X-Accel-Buffering "no"
    </FilesMatch>
    
    # إعدادات TS segments
    <FilesMatch "\.ts$">
        Header set Cache-Control "max-age=2592000, public, immutable"
        Header set Access-Control-Allow-Origin "*"
        Header set Accept-Ranges "bytes"
    </FilesMatch>
    
    # إعدادات MP4
    <FilesMatch "\.(mp4|webm)$">
        Header set Cache-Control "max-age=604800, public"
        Header set Accept-Ranges "bytes"
        Header set Content-Type "video/mp4"
    </FilesMatch>
</IfModule>

# زيادة الحدود للبث
<IfModule mod_php.c>
    php_value max_execution_time 0
    php_value max_input_time -1
    php_value memory_limit 1024M
    php_value post_max_size 1024M
    php_value upload_max_filesize 1024M
    php_value default_socket_timeout 600
</IfModule>

# ضغط Gzip
<IfModule mod_deflate.c>
    AddOutputFilterByType DEFLATE application/x-mpegURL video/mp4
</IfModule>

# إعادة التوجيه الذكي
<IfModule mod_rewrite.c>
    RewriteEngine On
    Options -Indexes
    
    # توجيه M3U8 للمعالج السريع
    RewriteCond %{REQUEST_URI} \.m3u8$
    RewriteRule ^(.*)$ fast-stream.php?url=$1 [L,QSA]
    
    # توجيه TS segments
    RewriteCond %{REQUEST_URI} \.ts$
    RewriteRule ^(.*)$ fast-stream.php?segment=$1 [L,QSA]
    
    # حماية من الهجمات
    RewriteCond %{QUERY_STRING} (base64_encode|eval\(|union.*select) [NC]
    RewriteRule .* - [F,L]
</IfModule>

# إعدادات السيرفر
ServerSignature Off
FileETag None

# =================================================
# END ELZEM PLAYER HTACCESS
# =================================================